Skip to content
OpenAdvisories

Vendor

CocoaPods

3 known vulnerabilities.

Products

CocoaPods 3
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.3
    CVE-2024-38368 EPSS 15%

    Trunk's 'Claim your pod' could be used to obtain un-used pods

    trunk.cocoapods.org is the authentication server for the CoacoaPods dependency manager. A vulnerability affected older pods which migrated from the pre-2014 pull request workflow to trunk. If the pods had never been claimed then it was still possible to do so…

    CocoaPods CocoaPods
  • Critical 10.0
    CVE-2024-38366 Public exploit EPSS 18%

    CoacoaPods trunk RCE in email verification system rfc-822

    trunk.cocoapods.org is the authentication server for the CoacoaPods dependency manager. The part of trunk which verifies whether a user has a real email address on signup used a rfc-822 library which executes a shell command to validate the email domain MX re…

    CocoaPods CocoaPods